Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa
File: a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa (raw, json)
Hash identifier: s4JIPxoaksnJ2aNmpdhu0uqfm7ZZT05+TAgeyEodvs0=
Subject key identifier: CF:3B:43:A1:A1:58:38:7D:8F:71:D7:11:08:4B:8D:BE:3A:39:65:80
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 33F4F959F5D2EF35E9521D037491D68B06E42D4C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa
Signing time: Wed 05 Mar 2025 17:51:14 +0000
ROA not before: Wed 05 Mar 2025 17:51:14 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.202.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f4:f9:59:f5:d2:ef:35:e9:52:1d:03:74:91:d6:8b:06:e4:2d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:51:14 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:eb:5d:96:cf:26:ab:bb:13:f8:64:eb:68:
a0:98:d1:d8:93:5c:66:6f:0d:b7:0b:25:ee:8b:45:
c6:f3:84:d1:be:65:ea:b8:15:27:87:72:c6:29:fc:
a0:cc:ea:37:55:ed:14:6e:ba:4b:ae:d0:20:b2:13:
1d:f6:9a:b1:2b:06:89:f7:26:89:88:d6:34:ad:d0:
b4:46:b7:d9:a6:16:74:5c:c0:8f:53:1c:fe:8f:08:
32:63:b1:12:f8:ca:80:da:26:75:ce:91:2c:98:b6:
8e:9d:76:41:02:e6:86:c8:2d:99:31:5f:f4:97:cc:
aa:8f:7b:d4:b4:7c:76:25:3a:3f:70:65:ff:95:fb:
37:b8:ff:c4:bf:fe:2f:de:1b:71:9a:0c:34:b3:b7:
18:2b:f3:43:7d:b1:a6:60:68:e6:34:d9:bf:76:76:
be:55:ac:98:79:e2:b7:61:ae:c3:87:a3:02:1d:8a:
17:2b:ef:2a:cc:ee:81:d0:c3:f0:4c:d4:f1:5a:18:
64:ad:61:58:79:4b:40:a4:d5:c3:b9:70:59:f3:3d:
46:eb:f6:5c:bd:25:16:68:cf:32:87:36:01:ad:7d:
6f:87:e3:a1:9f:c9:e9:e3:df:49:ec:8b:94:d6:f4:
53:39:19:d7:75:88:ec:25:68:b3:e8:a9:b1:d1:86:
39:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3B:43:A1:A1:58:38:7D:8F:71:D7:11:08:4B:8D:BE:3A:39:65:80
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.192.0/19
Signature Algorithm: sha256WithRSAEncryption
42:33:d1:48:3c:17:60:89:02:27:14:9c:de:6f:0f:6e:15:63:
60:5d:90:a0:72:51:e5:51:c5:93:10:21:d0:44:d1:93:b4:96:
ad:7f:68:68:63:34:90:1e:48:bd:98:2d:7b:7d:07:4a:09:2e:
bc:14:44:46:02:8f:15:0d:bc:0b:d4:2f:44:2d:07:8d:f0:95:
dc:c6:42:c8:4b:50:cc:3d:7c:68:05:7d:ec:0d:ba:bf:4d:4d:
5d:21:bf:b7:82:8e:06:fa:24:02:3e:64:b5:7e:50:ff:2d:b8:
69:57:f8:ff:a6:07:12:49:88:25:e1:18:0c:5d:bc:c2:af:7d:
c0:a1:c9:16:a4:8e:69:01:3d:a0:23:e1:d5:db:f4:b2:8e:31:
9b:85:a3:6b:6b:b5:dc:44:da:c4:52:7a:c4:78:86:f0:f4:12:
ed:b8:07:f0:38:de:01:95:12:02:c0:ab:fe:13:df:b9:4c:dd:
42:84:cc:c4:fe:14:05:7c:dd:a9:96:f1:83:26:84:b8:92:84:
fc:d3:a6:d1:da:e2:ee:ea:01:ac:c4:e9:94:13:ce:24:89:b0:
1d:95:e0:51:56:13:a4:8d:74:3d:30:86:35:01:10:22:df:00:
f7:35:ed:5a:72:60:cf:4e:b6:dc:b3:89:1d:4c:82:fd:7c:11:
86:1a:4c:42
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUM/T5WfXS7zXpUh0DdJHWiwbkLUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMDUxNzUxMTRaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDliODc2YjEyMTQyOTY1NWE4YjRiMjZkNTY4MTNhYzRmY2Y2NzA0NDcxYzNl
NGVmZWY4NWM4ZmE5NmQwNjJmZWUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL2A612WzyaruxP4ZOtooJjR2JNcZm8Ntwsl7otFxvOE0b5l6rgVJ4dyxin8
oMzqN1XtFG66S67QILITHfaasSsGifcmiYjWNK3QtEa32aYWdFzAj1Mc/o8IMmOx
EvjKgNomdc6RLJi2jp12QQLmhsgtmTFf9JfMqo971LR8diU6P3Bl/5X7N7j/xL/+
L94bcZoMNLO3GCvzQ32xpmBo5jTZv3Z2vlWsmHnit2Guw4ejAh2KFyvvKszugdDD
8EzU8VoYZK1hWHlLQKTVw7lwWfM9Ruv2XL0lFmjPMoc2Aa19b4fjoZ/J6ePfSeyL
lNb0UzkZ13WI7CVos+ipsdGGOZkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTPO0Oh
oVg4fY9x1xEIS42+OjllgDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YTFmZTYyZmQtM2M5Yi00YzlhLTg2N2ItNDJjN2Q2ZDk0ZmRmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcHKwDAN
BgkqhkiG9w0BAQsFAAOCAQEAQjPRSDwXYIkCJxSc3m8PbhVjYF2QoHJR5VHFkxAh
0ETRk7SWrX9oaGM0kB5IvZgte30HSgkuvBRERgKPFQ28C9QvRC0HjfCV3MZCyEtQ
zD18aAV97A26v01NXSG/t4KOBvokAj5ktX5Q/y24aVf4/6YHEkmIJeEYDF28wq99
wKHJFqSOaQE9oCPh1dv0so4xm4Wja2u13ETaxFJ6xHiG8PQS7bgH8DjeAZUSAsCr
/hPfuUzdQoTMxP4UBXzdqZbxgyaEuJKE/NOm0dri7uoBrMTplBPOJImwHZXgUVYT
pI10PTCGNQEQIt8A9zXtWnJgz0623LOJHUyC/XwRhhpMQg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:02 2025 by rpki-client